Only strip /assets from Chrome CSP in development